[go: up one dir, main page]

WO2010057173A3 - Communautés d’intérêt en mémoire utilisant un partage cryptographique - Google Patents

Communautés d’intérêt en mémoire utilisant un partage cryptographique Download PDF

Info

Publication number
WO2010057173A3
WO2010057173A3 PCT/US2009/064765 US2009064765W WO2010057173A3 WO 2010057173 A3 WO2010057173 A3 WO 2010057173A3 US 2009064765 W US2009064765 W US 2009064765W WO 2010057173 A3 WO2010057173 A3 WO 2010057173A3
Authority
WO
WIPO (PCT)
Prior art keywords
interest
community
data
storage network
access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2009/064765
Other languages
English (en)
Other versions
WO2010057173A2 (fr
Inventor
David Dodgson
Joseph Neill
Ralph R. Farina
Edward Chin
Albert French
Scott Summers
Robert Johnson
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Unisys Corp
Original Assignee
Unisys Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US12/272,012 external-priority patent/US20100125730A1/en
Priority claimed from US12/336,559 external-priority patent/US20100153703A1/en
Priority claimed from US12/336,568 external-priority patent/US20100150341A1/en
Priority claimed from US12/336,558 external-priority patent/US20100153740A1/en
Priority claimed from US12/336,564 external-priority patent/US8392682B2/en
Priority claimed from US12/336,562 external-priority patent/US20100154053A1/en
Priority claimed from US12/342,464 external-priority patent/US20100162032A1/en
Priority claimed from US12/342,438 external-priority patent/US8135980B2/en
Priority claimed from US12/342,547 external-priority patent/US20100162004A1/en
Priority claimed from US12/342,500 external-priority patent/US8386798B2/en
Priority claimed from US12/342,414 external-priority patent/US20100162002A1/en
Priority claimed from US12/342,379 external-priority patent/US20100162001A1/en
Priority claimed from US12/342,610 external-priority patent/US20100161981A1/en
Priority claimed from US12/342,636 external-priority patent/US20100162005A1/en
Priority claimed from US12/342,523 external-priority patent/US20100162003A1/en
Priority claimed from US12/342,575 external-priority patent/US20100161964A1/en
Application filed by Unisys Corp filed Critical Unisys Corp
Priority to AU2009313728A priority Critical patent/AU2009313728A1/en
Priority to EP09802049A priority patent/EP2359295A2/fr
Publication of WO2010057173A2 publication Critical patent/WO2010057173A2/fr
Publication of WO2010057173A3 publication Critical patent/WO2010057173A3/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/062—Securing storage systems
    • G06F3/0623—Securing storage systems in relation to content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/104—Grouping of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Health & Medical Sciences (AREA)
  • Databases & Information Systems (AREA)
  • Human Computer Interaction (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Storage Device Security (AREA)

Abstract

On décrit des procédés et des systèmes de présentation de données dans un réseau sécurisé de stockage de données. Un des procédés comporte l’étape consistant à définir une communauté d’intérêt capable d’accéder à des données stockées dans un réseau sécurisé de stockage de données, la communauté d’intérêt comprenant une pluralité d’utilisateurs souhaitant accéder à un ensemble commun de données. Dans un autre procédé, plusieurs communautés d’intérêt sont capables d’accéder à des données stockées dans un réseau sécurisé de stockage de données et comprenant une pluralité d’utilisateurs souhaitant accéder à un ensemble commun de données, chaque communauté d’une pluralité de communautés d’intérêt possédant un ensemble de droits de sécurité. Dans un autre procédé encore, la communauté d’intérêt associée à une clé de groupe de travail donnant accès à un disque virtuel, le disque virtuel permettant l’accès à un volume comportant une pluralité de partitions stockées sur une pluralité de dispositifs physiques de stockage. Le procédé comporte également l’étape consistant à associer la communauté d’intérêt à une clé de groupe de travail. Suite à l’identification d’un dispositif client comme étant associé à un utilisateur parmi la pluralité d’utilisateurs de la communauté d’intérêt, un disque virtuel est présenté au dispositif client, le disque virtuel étant associé à la clé de groupe de travail et à un volume contenant l’ensemble commun de données, le volume comprenant une pluralité de partitions stockées sur une pluralité de dispositifs physiques de stockage.
PCT/US2009/064765 2008-11-17 2009-11-17 Communautés d’intérêt en mémoire utilisant un partage cryptographique Ceased WO2010057173A2 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP09802049A EP2359295A2 (fr) 2008-11-17 2009-11-17 Communautés d'intérêt en mémoire utilisant un partage cryptographique
AU2009313728A AU2009313728A1 (en) 2008-11-17 2009-11-17 Storage communities of interest using cryptographic splitting

Applications Claiming Priority (32)

Application Number Priority Date Filing Date Title
US12/272,012 US20100125730A1 (en) 2008-11-17 2008-11-17 Block-level data storage security system
US12/272,012 2008-11-17
US12/336,568 US20100150341A1 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/336,562 2008-12-17
US12/336,562 US20100154053A1 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/336,564 US8392682B2 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/336,559 2008-12-17
US12/336,564 2008-12-17
US12/336,568 2008-12-17
US12/336,558 2008-12-17
US12/336,558 US20100153740A1 (en) 2008-12-17 2008-12-17 Data recovery using error strip identifiers
US12/336,559 US20100153703A1 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/342,636 2008-12-23
US12/342,523 2008-12-23
US12/342,379 2008-12-23
US12/342,610 US20100161981A1 (en) 2008-12-23 2008-12-23 Storage communities of interest using cryptographic splitting
US12/342,464 US20100162032A1 (en) 2008-12-23 2008-12-23 Storage availability using cryptographic splitting
US12/342,414 US20100162002A1 (en) 2008-12-23 2008-12-23 Virtual tape backup arrangement using cryptographically split storage
US12/342,523 US20100162003A1 (en) 2008-12-23 2008-12-23 Retrieval of cryptographically-split data blocks from fastest-responding storage devices
US12/342,547 2008-12-23
US12/342,610 2008-12-23
US12/342,575 US20100161964A1 (en) 2008-12-23 2008-12-23 Storage communities of interest using cryptographic splitting
US12/342,438 2008-12-23
US12/342,636 US20100162005A1 (en) 2008-12-23 2008-12-23 Storage communities of interest using cryptographic splitting
US12/342,379 US20100162001A1 (en) 2008-12-23 2008-12-23 Secure network attached storage device using cryptographic settings
US12/342,500 US8386798B2 (en) 2008-12-23 2008-12-23 Block-level data storage using an outstanding write list
US12/342,414 2008-12-23
US12/342,464 2008-12-23
US12/342,575 2008-12-23
US12/342,500 2008-12-23
US12/342,438 US8135980B2 (en) 2008-12-23 2008-12-23 Storage availability using cryptographic splitting
US12/342,547 US20100162004A1 (en) 2008-12-23 2008-12-23 Storage of cryptographically-split data blocks at geographically-separated locations

Publications (2)

Publication Number Publication Date
WO2010057173A2 WO2010057173A2 (fr) 2010-05-20
WO2010057173A3 true WO2010057173A3 (fr) 2010-10-07

Family

ID=42124888

Family Applications (3)

Application Number Title Priority Date Filing Date
PCT/US2009/064824 Ceased WO2010057199A2 (fr) 2008-11-17 2009-11-17 Stockage et localisation de blocs de données séparés de manière cryptographique sur de multiples dispositifs de stockage
PCT/US2009/064765 Ceased WO2010057173A2 (fr) 2008-11-17 2009-11-17 Communautés d’intérêt en mémoire utilisant un partage cryptographique
PCT/US2009/064820 Ceased WO2010057196A2 (fr) 2008-11-17 2009-11-17 Disponibilité de stockage sécurisé par séparation cryptographique

Family Applications Before (1)

Application Number Title Priority Date Filing Date
PCT/US2009/064824 Ceased WO2010057199A2 (fr) 2008-11-17 2009-11-17 Stockage et localisation de blocs de données séparés de manière cryptographique sur de multiples dispositifs de stockage

Family Applications After (1)

Application Number Title Priority Date Filing Date
PCT/US2009/064820 Ceased WO2010057196A2 (fr) 2008-11-17 2009-11-17 Disponibilité de stockage sécurisé par séparation cryptographique

Country Status (3)

Country Link
EP (3) EP2359298A2 (fr)
AU (7) AU2009313675A1 (fr)
WO (3) WO2010057199A2 (fr)

Families Citing this family (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8725688B2 (en) 2008-09-05 2014-05-13 Commvault Systems, Inc. Image level copy or restore, such as image level restore without knowledge of data object metadata
GB2496111A (en) * 2011-10-28 2013-05-08 Intergence Systems Ltd Tracing the real-world storage location of critical data items to form part of physical network map
US9633216B2 (en) 2012-12-27 2017-04-25 Commvault Systems, Inc. Application of information management policies based on operation with a geographic entity
US9459968B2 (en) 2013-03-11 2016-10-04 Commvault Systems, Inc. Single index to query multiple backup formats
US10169121B2 (en) 2014-02-27 2019-01-01 Commvault Systems, Inc. Work flow management for an information management system
US9648100B2 (en) 2014-03-05 2017-05-09 Commvault Systems, Inc. Cross-system storage management for transferring data across autonomous information management systems
US9740574B2 (en) 2014-05-09 2017-08-22 Commvault Systems, Inc. Load balancing across multiple data paths
US11249858B2 (en) 2014-08-06 2022-02-15 Commvault Systems, Inc. Point-in-time backups of a production application made accessible over fibre channel and/or ISCSI as data sources to a remote application by representing the backups as pseudo-disks operating apart from the production application and its host
US9852026B2 (en) 2014-08-06 2017-12-26 Commvault Systems, Inc. Efficient application recovery in an information management system based on a pseudo-storage-device driver
US9766825B2 (en) 2015-07-22 2017-09-19 Commvault Systems, Inc. Browse and restore for block-level backups
US10296368B2 (en) 2016-03-09 2019-05-21 Commvault Systems, Inc. Hypervisor-independent block-level live browse for access to backed up virtual machine (VM) data and hypervisor-free file-level recovery (block-level pseudo-mount)
US10838821B2 (en) 2017-02-08 2020-11-17 Commvault Systems, Inc. Migrating content and metadata from a backup system
US10740193B2 (en) 2017-02-27 2020-08-11 Commvault Systems, Inc. Hypervisor-independent reference copies of virtual machine payload data based on block-level pseudo-mount
US10891069B2 (en) 2017-03-27 2021-01-12 Commvault Systems, Inc. Creating local copies of data stored in online data repositories
US10776329B2 (en) 2017-03-28 2020-09-15 Commvault Systems, Inc. Migration of a database management system to cloud storage
US11074140B2 (en) 2017-03-29 2021-07-27 Commvault Systems, Inc. Live browsing of granular mailbox data
US10664352B2 (en) 2017-06-14 2020-05-26 Commvault Systems, Inc. Live browsing of backed up data residing on cloned disks
GB2567146B (en) * 2017-09-28 2022-04-13 Red Flint Llp Method and system for secure storage of digital data
US10795927B2 (en) 2018-02-05 2020-10-06 Commvault Systems, Inc. On-demand metadata extraction of clinical image data
US10789387B2 (en) 2018-03-13 2020-09-29 Commvault Systems, Inc. Graphical representation of an information management system
US11308034B2 (en) 2019-06-27 2022-04-19 Commvault Systems, Inc. Continuously run log backup with minimal configuration and resource usage from the source machine
CN114946157B (zh) * 2019-12-31 2025-08-05 纳格拉影像有限公司 用于控制对分段数据的访问的技术
US20240388583A1 (en) * 2023-05-18 2024-11-21 Pure Storage, Inc. Service Mesh-Based Control of Access to a Storage Application

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070160198A1 (en) * 2005-11-18 2007-07-12 Security First Corporation Secure data parser method and system
WO2007120437A2 (fr) * 2006-04-13 2007-10-25 Cleversafe, Inc. Systeme de gestion de metadonnees sur un systeme de stockage d'information disperse
WO2008118227A2 (fr) * 2006-12-08 2008-10-02 Unisys Corporation Sécurisation de données multidiffusées

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6167531A (en) * 1998-06-18 2000-12-26 Unisys Corporation Methods and apparatus for transferring mirrored disk sets during system fail-over
US7391865B2 (en) * 1999-09-20 2008-06-24 Security First Corporation Secure data parser method and system
US7512673B2 (en) * 2001-01-11 2009-03-31 Attune Systems, Inc. Rule based aggregation of files and transactions in a switched file system
US20030188153A1 (en) * 2002-04-02 2003-10-02 Demoff Jeff S. System and method for mirroring data using a server
US6928514B2 (en) * 2002-08-05 2005-08-09 Lsi Logic Corporation Method and apparatus for teaming storage controllers
JP4601969B2 (ja) * 2004-01-27 2010-12-22 株式会社日立製作所 ファイル入出力制御装置
US7203871B2 (en) * 2004-06-03 2007-04-10 Cisco Technology, Inc. Arrangement in a network node for secure storage and retrieval of encoded data distributed among multiple network nodes
CN101199187A (zh) * 2004-07-23 2008-06-11 茨特里克斯系统公司 用于网络节点之间通信最优化的系统和方法
US7284020B2 (en) * 2004-09-01 2007-10-16 Hitachi, Ltd. System and method for data recovery in a storage system
US20070067644A1 (en) * 2005-08-26 2007-03-22 International Business Machines Corporation Memory control unit implementing a rotating-key encryption algorithm
US8880799B2 (en) * 2005-09-30 2014-11-04 Cleversafe, Inc. Rebuilding data on a dispersed storage network

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070160198A1 (en) * 2005-11-18 2007-07-12 Security First Corporation Secure data parser method and system
WO2007120437A2 (fr) * 2006-04-13 2007-10-25 Cleversafe, Inc. Systeme de gestion de metadonnees sur un systeme de stockage d'information disperse
WO2008118227A2 (fr) * 2006-12-08 2008-10-02 Unisys Corporation Sécurisation de données multidiffusées

Also Published As

Publication number Publication date
AU2016210718B2 (en) 2018-10-25
AU2016210718A1 (en) 2016-09-15
WO2010057196A3 (fr) 2011-12-29
EP2359295A2 (fr) 2011-08-24
AU2018236850B2 (en) 2020-07-09
AU2016210716A1 (en) 2016-09-08
AU2009313675A1 (en) 2011-07-07
AU2020200461B2 (en) 2021-10-07
EP2359249A2 (fr) 2011-08-24
AU2020200461A1 (en) 2020-02-13
WO2010057199A3 (fr) 2011-03-17
EP2359298A2 (fr) 2011-08-24
WO2010057196A2 (fr) 2010-05-20
AU2009313728A1 (en) 2011-07-07
AU2018236850A1 (en) 2018-10-18
AU2009313672A1 (en) 2011-07-07
WO2010057199A2 (fr) 2010-05-20
WO2010057173A2 (fr) 2010-05-20

Similar Documents

Publication Publication Date Title
WO2010057173A3 (fr) Communautés d’intérêt en mémoire utilisant un partage cryptographique
WO2010141445A3 (fr) Conditionnement de clés de groupe de travail pour une authentification d'appartenance à une communauté d'intérêt
WO2007001329A3 (fr) Gestion de cles cryptographiques
WO2012104771A3 (fr) Accès sécurisé à des dossiers médicaux personnels dans des situations d'urgence
WO2013081983A3 (fr) Migration d'un contenu authentifié vers un consommateur de contenu
WO2005119960A3 (fr) Procede et systeme de chiffrement d'une base de donnees de preservation des structures
WO2009105280A3 (fr) Systèmes et procédés pour une gestion et une communication de groupe de travail sécurisées
WO2010057151A3 (fr) Système de sécurité de stockage de données par blocs
GB2473566A (en) Systems and method for data security
WO2007012814A3 (fr) Acces
NZ592784A (en) A collaborative computing environment includes a federated identity manager coupled to a multi-level secure computing network and a client having a biometric reading device.
WO2006069274A3 (fr) Commande de contenu polyvalente avec segmentation
WO2006033997A3 (fr) Systeme et procede pour fournir une autorisation d'acces a du contenu numerique
EP1847941A3 (fr) Procédé et système pour réinitialiser les mots de passe
WO2007138486A3 (fr) Système et procédé destinés à renforcer le degré de restriction lors d'accès à des applications logicielles
WO2009148430A3 (fr) Système et procédé destinés à collecter des informations liées à la situation du marché par l'intermédiaire d'un environnement de réseautage basé sur le web
WO2014108835A3 (fr) Procédé pour fournir une sécurité à l'aide d'un calcul sécurisé
EP1953670A3 (fr) Système et procédé de cryptage de données d'un dispositif de stockage et accès aux données
WO2008030603A3 (fr) Gestion d'inventaire personnel et réseau d'échange d'articles
WO2009158086A3 (fr) Techniques permettant d'assurer une authentification et une intégrité de communications
WO2011021835A3 (fr) Techniques destinées à fournir une gestion de justificatif efficace à des communications sécurisées entre des clients
WO2008020991A3 (fr) Gestion d'identité commune notarisée
WO2010057191A8 (fr) Sécurité de stockage par séparation cryptographique
WO2008030991A3 (fr) Procédés de sécurité bloquant l'accès de tiers à des informations éducatives
CN104363093A (zh) 通过动态授权码对文件数据加密的方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09802049

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 2009802049

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2009313728

Country of ref document: AU

WWE Wipo information: entry into national phase

Ref document number: 4608/DELNP/2011

Country of ref document: IN

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2009313728

Country of ref document: AU

Date of ref document: 20091117

Kind code of ref document: A